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© SPECIFICATION 

1 . Title of the Invention 

DOWNLOAD SYSTEM FOR ATM 
2 . CLAIM 

A download system for an Automated Teller Machine (ATM) , 
wherein when a new program data is downloaded from an 
upper-level device to the ATM, an old program data stored in 
the ATM is kept without being destroyed until the download 
of the new program data is successfully completed so that the 
old program data can be used to operate the ATM until the new 
program data is ready to be used. 

3 . Detailed Description of the Invention 

[Technical field] 

The present invention relates to a system having 
countermeasures when the download of updating program data 
from an upper-level device onto an ATM is failed. 

[Background Art] 

In an conventional system as described in, for example, 
Japanese Patent Application Publication No . S59-4 34 7 4 , only 
data is transferred between a center and a terminal, and the 
program capable of controlling the entire terminal and a large 
capacity of data, for example, listing the branch names of 
the bank are handled locally for each terminal. 

[Problem to be solved by the Invention] 

According to a conventional technique, when, for 
example, a line disturbance occurs during the download of a 
new program, an old program stored in the device may be 
destroyed. Because of this disadvantage, the device cannot 
be worked properly until the new program is successfully 
downloaded . 



2 



In a system according to an embodiment of the present 
invention, even when the download of a new program is failed, 
the device can work using an old program. 
[Means for solving problem] 

To attain the object, the external storage device for 
storing program and data includes two areas: one area for 
storing an old program and data and the other area for storing 
a new program and data. By employing this structure, it is 
possible to store new program and data while old program and 
data is kept in the area of the external storage device. 
[Operations] 

By providing the two areas: one area for storing old 
program and data and the other area for storing new program 
and data, the old program and data are not destroyed while 
the new program and data are being stored. Therefore, even 
when the download of the new program is failed, the device 
can start working using the old program and software and won' t 
be out of action by download. 
[Embodiment] 

In the following, an embodiment of the present invention 
is described. 

FIG. 1 shows an exemplary configuration of an ATM device 
according to an embodiment of the present invention. 

The device includes external storage devices 1 and 2. 
The program and data stored in the external storage devices 
1 and 2 are loaded to a main body control section 3 so as to 
be executed. The main body control section 3 is connected 
to, for example, an operator operations section 5 where a 
guidance is displayed and an operator operates keys to input 
data, a communication control section 4 for communicating 
with an upper 10, a card handling section 6 for reading from 
and writing onto a magnetic card and an IC card, a 
passbook/receipt handling section 7 for reading a magnetic 
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strip of a passbook and issuing and printing a receipt, a bill 
handling section 8 for making deposits and withdrawals of 
bills, sorting bills, and checking whether the bills are 
counterfeit or not, a coin handling section 9 for making 
deposits and withdrawals of coins, sorting coins, and 
checking whether the coins are counterfeited or not, and 
collectively controls all of them. 

The upper-level device 10 has a data file corresponding 
to individual users of this device, and deposit and withdrawal 
processing is being performed while data is exchanged between 
the device and the upper-level device 10. 

FIG. 2 shows a configuration of the files stored in the 
external storage devices 1 and 2 in this device. 

A loader 20 is loaded onto a memory of the main body 
control section 3 by a simple loading program stored in the 
main body control section 3, and is executed. 

The loader 20 is also a program for loading a program 
file stored in the external storage devices 1 and 2. When 
the loader 20 is executed, an operation system 21 (OS) 
performing the fundamental input and output of this device 
and an application program 22 controlling, for example, 
deposit and withdrawal processing of this device are 
sequentially loaded to be executed. 

Data 23 includes data defining the modifiable 
specifications of this device, data for display, and sound 
data for guidance. 

An auxiliary area 24 is a preparatory area used. The 
size of the auxiliary area 24 decreases when the size of the 
program or data stored in the external storage devices 1 and 
2 increases. 

FIG. 3 shows the interaction of messages between the 
upper-level device 10 and this device. 

When the device receives a message of starting the 
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download from the upper-level device 10, the main body control 
section 3 of the device assigns one (for example, the external 
storage device 2) area storing older program and data than 
the other area to the area where newly downloaded program and 
data are stored. 

Further, in this case, when there is a remaining file 
that cannot be used because the download of the file is failed 
during the previous download, the external storage device 
including the remaining file is assigned to the area where 
newly downloaded program and data are stored. 

As described above, it is assumed that the external 
storage device 2 is selected as the area where newly 
downloaded program and data is stored. When the device 
receives a message of staring download, the device checks 
whether the selected external storage device 2 works properly 
and transmits the checked result to the upper-level device 
10. 

When the upper-level device 10 receives the result that 
the external storage device 2 of the device is working 
properly, the upper-level device 10 transmits the file name 
and the revision number of a new program and a new data to 
be downloaded to the device. The device checks whether the 
new program and the new data are not yet downloaded using the 
transmitted file name and revision number. When it is 
determined that the new program and the new data are not yet 
downloaded, the device sends a request to download the program 
and the data to the upper-level device 10, and otherwise, the 
device sends a refusal of download the program, and the data 
to the upper-level device 10. 

When the upper-level device 10 receives the request of 
the download, the upper-level device 10 transmits the block 
number representing the size of the file to be transferred 
to the device. The device checks whether the file to be 
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transferred to the device can be stored in the storage area 
of the external storage device, and transmits the checked 
result to the upper-level device 10. 

When the upper-level device 10 recognizes that the 
device has enough area to store the entire file to be 
downloaded, the upper-level device 10 starts transmitting the 
file on a block-to-block basis. It is assumed that the 
upper-level device 10 adds a code for verifying the 
correctness of the block to the data of each block. When the 
device receives one block of the data, the device verifies 
the correctness of the data using the added code, and 
transmits the verified result to the upper-level device 10. 

The upper-level device 10 recognizes that the device 
receives the data correctly, the upper-level device 10 
transmits the next data. On the other hand, when the 
upper-level device 10 recognized that the device did not 
receive the data correctly, the upper-level device 10 
transmits the data of the same block. Further, when the data 
cannot received correctly ten times in a row, the transmission 
is aborted due to a transmission error. 

After all the blocks are transmitted, the upper-level 
device 10 transmits a download completion message. When the 
device receives the entire data successfully, the device 
returns a successful completion message, and when the device 
could not receive the entire data successfully, the device 
returns an unsuccessful completion message to the upper-level 
device 10. 

The upper-level device 10 memorizes whether it is 
necessary to download the data again in the next time. 

When the download is unsuccessful except where new 
program and data are loaded already, the new program and data 
are not stored in the device. However, since an old program 
remains without being destroyed, the device may work using 
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the old program. 

Further, in this case, even when the external storage 
device 2 cannot be used due to, for example, a trouble, as 
shown in FIG. 4, a new program and data can be stored utilizing 
the auxiliary area 1 of the other external storage device 1 
without destroying the old program and data. When the 
capacity of the auxiliary area 1 is not enough, it may be 
possible to overwrite on the old program. However, in this 
case, when the download of the new program is failed, the 
device won't be able to work. Therefore, it is suggested that 
overwriting on the old program should be done only when the 
device cannot work using the old program. 

Still further, after the download of the new program, 
there are two new and old programs and data are stored in the 
device. After making sure that the download is successful, 
it is possible to overwrite the new program and data on the 
old program and data so that two sets of new program and data 
are stored. This is advantageous because even when a program 
and data cannot be read or write due to, for example, a trouble 
on the external storage device in use, the device my work by 
reading and using an auxiliary program and data. However, 
this method cannot be used when a new program and data are 
downloaded but cannot be used for a period of time, for example, 
the new program and data are downloaded in September 1 st , but 
the program and data cannot be executed until September 19 th 
and the older program and data should be used until then. IN 
this case, since the older program and data should not be 
erased soon after the download of the new program and data, 
the older program and data are to be overwritten by the new 
program and data after the new program and data can be used. 

Still further, according to the download of the above 
example, either old or new program will be used in the device. 
To avoid the unstable status, it is necessary to check the 
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revision number of the program that is to be used. Therefore, 
when the revision number is included in data exchanged with 
the upper-level device 10, it is possible to display the 
version number when a program is initiated so as to work 
correctly using a correct program and data. 
[Effect of the invention] 

According to an embodiment of the present invention, 
older program data are not destroyed during the download of 
new program and data. Therefore, even when the download of 
the new program and data are failed, the device can work using 
the older program and data. 

Further, there are two separated external storage 
devices to separate the area where old program and data are 
stored from the area where new program and data are stored. 
Because of this structure, even when one of the external 
storage device has a trouble, the device can work using a 
program and data stored in the other external storage device. 

Still further, by storing two sets of new program and 
data in the device, when one of the program and data in use 
cannot be read, the device can work properly with the latest 
program and data using an auxiliary program and data. 

Still further, by receiving the revision number of the 
program and data to be used, it is possible to select a correct 
program and data for the device. 

4 . Brief Description of the Drawings 

FIG. 1 shows an exemplary configuration of an Automated 
Teller Machine (ATM) according to an embodiment of the present 
invention; 

FIG. 2 shows an exemplary file configuration in external 
storage devices of a device according to an embodiment of the 
present invention; 

FIG. 3 shows the exemplary transaction between an 
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upper-level device and the device during download according 
to an embodiment of the present invention; and 

FIG. 4 shows an exemplary file configuration in the 
external storage devices of the device when one of the 
external storage device has a trouble. 
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FIG. 1 

1: EXTERNAL STORAGE DEVICE 1 

2: EXTERNAL STORAGE DEVICE 2 

3: MAIN BODY CONTROL SECTION 

4: COMMUNICATION CONTROL SECTION 

5: OPERATOR OPERATIONS SECTION 

6: CARD HANDLING SECTION 

7: PASSBOOK/RECEIPT HANDLING SECTION 

8: BILL HANDLING SECTION 

9: COIN HANDLING SECTION 

10 UPPER-LEVEL DEVICE 

FIG. 2 

® : EXTERNAL STORAGE DEVICE 1 
©: EXTERNAL STORAGE DEVICE 2 
20: LOADER 1/2 
21: OS1/2 

22: APPLICATION PROGRAM 1/2 
23: DATA 1/2 
24: AUXILIARY AREA 1/2 
FIG. 3 

1: UPPER-LEVEL DEVICE 
2: THIS DEVICE 

3: EXTERNAL STORAGE DEVICE OUT OF ACTION 
4 : DOWNLOAD START REQUEST 

5: SELECTION AND OPERATION CHECK OF EXTERNAL STORAGE DEVICE 
6: DOWNLOAD REQUEST/REFUSAL 
7: OPERATION IS CORRECT 

8: NEW PROGRAM MANE AND REVISION NUMBER 
9: CHECK FILE CURRENTLY STORED 
10: ALREADY LOADED 
11: NOT LOADED YET 
12: BLOCK NUMBER (N) 

13: CHECK CAPACITY OF STORAGE AREA 



10 



14: NOT ENOUGH CAPACITY 

15: ENOUGH CAPACITY 

16: BLOCK 1 OF NEW PROGRAM 

17: CHECK CORRECTNESS AND STORE OF DATA 

18: DOWNLOADED CORRECTLY 

19: BLOCK 2 OF NEW PROGRAM 

20: BLOCK M OF NEW PROGRAM 

21: DATA IS NOT CORRECT BY CHECKING 

22: DOWNLOAD FAILED 1 st TIME 

23: RESEND 

24: BLOCK M OF NEW PROGRAM 

25: DOWNLOAD FAILED 2 ND TIME 

26: TERMINATE THE LOOP AT 10 th TIMES 

27: BLOCK N OF NEW PROGRAM 

28: RESEND 

2 9 : DATA 

30: BLOCK M+l OF NEW PROGRAM 

31: BLOCK N OF NEW PROGRAM 

32: DOWNLOAD COMPLETE MESSAGE 

33: RETURN ABNORMAL END/NORMAL END 

34: NORMAL END/ABNORMAL END 

FIG. 4 

1: EXTERNAL STORAGE DEVICE 1 
2: EXTERNAL STORAGE DEVICE 2 
®: LOADER 1 
©: OS 1 

(3): APPLICATION PROGRAM 1 
©: DATA 1 

©: APPLICATION PROGRAM 2 

(D: AUXILIARY AREA 1 

©: LOAD AREA 

®: OUT OF ACTION 
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